Polynomial time key-recovery attack on high rate random alternant codes - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Article Dans Une Revue IEEE Transactions on Information Theory Année : 2023

Polynomial time key-recovery attack on high rate random alternant codes

Résumé

A long standing open question is whether the distinguisher of high rate alternant codes or Goppa codes [FGO `11] can be turned into an algorithm recovering the algebraic structure of such codes from the mere knowledge of an arbitrary generator matrix of it. This would allow to break the McEliece scheme as soon as the code rate is large enough and would break all instances of the CFS signature scheme. We give for the first time a positive answer for this problem when the code is a generic alternant code and when the code field size q is small : q P t2, 3u and for all regime of other parameters for which the aforementioned distinguisher works. This breakthrough has been obtained by two different ingredients : (i) a way of using code shortening and the component-wise product of codes to derive from the original alternant code a sequence of alternant codes of decreasing degree up to getting an alternant code of degree 3 (with a multiplier and support related to those of the original alternant code); (ii) an original Gröbner basis approach which takes into account the non standard constraints on the multiplier and support of an alternant code which recovers in polynomial time the relevant algebraic structure of an alternant code of degree 3 from the mere knowledge of a basis for it.
Fichier principal
Vignette du fichier
main.pdf (705.21 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04276519 , version 1 (09-11-2023)

Licence

Paternité

Identifiants

Citer

Magali Bardet, Rocco Mora, Jean-Pierre Tillich. Polynomial time key-recovery attack on high rate random alternant codes. IEEE Transactions on Information Theory, In press, ⟨10.1109/TIT.2023.3334592⟩. ⟨hal-04276519⟩
23 Consultations
4 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More